$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5589d041-bab0-368b-bc49-a67b761842dc.roa File: 5589d041-bab0-368b-bc49-a67b761842dc.roa (raw, json) Hash identifier: rjp7VFAepYoxgw0kI9A+vch1b9MXN38cCVE+A/E0gI4= Subject key identifier: 49:6C:4B:69:7E:E2:39:89:B6:01:8E:6A:29:E2:1C:B5:6A:4C:CB:39 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715D01283E91A9D8D8B61280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5589d041-bab0-368b-bc49-a67b761842dc.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 2604:cb00:3800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5d:01:28:3e:91:a9:d8:d8:b6:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=609d401a-c4f4-41e4-9b05-6422e2791c2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:8e:fb:7c:85:47:91:4d:ec:18:f7:46:1c:1b: 57:26:2c:4b:a9:f0:27:49:03:df:08:72:78:d2:5f: 70:b2:98:29:0f:e4:b2:52:ff:4a:26:2c:76:e2:d7: ad:ec:68:24:cb:d4:05:b6:e9:4f:01:10:56:8f:74: 5f:ca:d4:29:b0:5b:7c:f6:27:d6:31:a8:81:22:0b: 87:70:05:87:a0:88:8f:22:84:4f:df:78:06:ba:46: da:15:37:08:08:da:79:e2:0a:17:28:00:34:a3:38: 3f:eb:93:63:15:30:88:4a:56:d3:dd:db:21:33:56: 1e:3f:15:55:f7:9a:70:f5:93:a5:d8:e1:57:17:98: 8d:d2:b8:85:38:76:69:a6:17:9b:8d:a7:39:ec:f9: 1b:e5:b6:12:c9:95:6f:99:38:85:b1:56:3a:9b:ec: 74:4c:c4:cf:64:c7:79:38:d8:0f:ca:90:37:03:38: 9e:15:08:6a:39:65:cb:ca:41:39:85:29:f1:37:c3: 4e:9e:6b:93:37:d5:58:24:06:4a:88:4b:93:d0:89: ba:0d:63:b2:22:2c:4b:fc:7c:62:8a:f8:37:82:62: af:a1:05:b5:30:3f:ea:c2:84:d5:dc:bf:ae:d3:75: fc:78:b6:a1:b3:d2:fe:ed:c5:ca:21:74:3d:2c:63: 9f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:6C:4B:69:7E:E2:39:89:B6:01:8E:6A:29:E2:1C:B5:6A:4C:CB:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5589d041-bab0-368b-bc49-a67b761842dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:3800::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:42:f3:39:9c:09:ce:c3:06:5e:ae:82:2e:f6:3c:88:11:a9: bc:a9:f5:4d:35:1b:6e:7a:fb:4e:9d:d8:81:46:35:2f:02:93: 69:bc:ed:5f:4a:f3:5d:5e:be:14:63:fe:c5:d5:cf:26:f5:18: e8:bf:b0:d4:a0:6d:ea:31:5a:7d:85:e8:de:37:95:6a:c0:dd: 25:10:5d:ca:7b:b6:b1:ef:6d:5a:e3:fd:49:8a:29:97:6d:b0: b3:50:9a:49:d7:70:a7:72:9b:1e:09:0a:ff:3c:eb:80:dd:bf: 64:c0:45:4d:9d:0f:92:1a:54:27:ee:56:63:90:7b:8f:94:57: b3:85:42:cb:e8:12:11:22:97:6b:d8:ef:6f:9d:44:81:de:da: 24:df:56:c9:23:20:c2:f6:6b:3f:de:35:72:df:bd:83:55:08: 46:d6:d5:cb:06:c9:29:64:6a:bb:f7:ab:83:64:cf:f9:88:c8: c5:04:b4:f5:da:ab:12:f4:02:40:33:68:5d:7a:58:2b:aa:ad: 40:e3:ee:f3:4f:bc:57:a8:c6:d6:17:e4:74:99:c6:b8:44:a1: 7e:47:4e:a4:a7:37:83:41:09:4b:cf:fd:45:56:7e:26:3a:49: 6d:63:7f:fa:f1:13:62:d3:8e:89:9c:32:8e:13:48:e5:ec:37: 25:89:3d:9b -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtxXQEoPpGp2Ni2EoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk NjA5ZDQwMWEtYzRmNC00MWU0LTliMDUtNjQyMmUyNzkxYzJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4477fIVHkU3sGPdGHBtXJixLqfAnSQPfCHJ4 0l9wspgpD+SyUv9KJix24tet7Ggky9QFtulPARBWj3RfytQpsFt89ifWMaiBIguH cAWHoIiPIoRP33gGukbaFTcICNp54goXKAA0ozg/65NjFTCISlbT3dshM1YePxVV 95pw9ZOl2OFXF5iN0riFOHZpphebjac57Pkb5bYSyZVvmTiFsVY6m+x0TMTPZMd5 ONgPypA3AzieFQhqOWXLykE5hSnxN8NOnmuTN9VYJAZKiEuT0Im6DWOyIixL/Hxi ivg3gmKvoQW1MD/qwoTV3L+u03X8eLahs9L+7cXKIXQ9LGOf0QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFElsS2l+4jmJtgGOainiHLVqTMs5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTU4OWQwNDEtYmFiMC0z NjhiLWJjNDktYTY3Yjc2MTg0MmRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLADgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAWELzOZwJzsMGXq6CLvY8iBGpvKn1TTUbbnr7Tp3YgUY1LwKTabzt X0rzXV6+FGP+xdXPJvUY6L+w1KBt6jFafYXo3jeVasDdJRBdynu2se9tWuP9SYop l22ws1CaSddwp3KbHgkK/zzrgN2/ZMBFTZ0PkhpUJ+5WY5B7j5RXs4VCy+gSESKX a9jvb51Egd7aJN9WySMgwvZrP941ct+9g1UIRtbVywbJKWRqu/erg2TP+YjIxQS0 9dqrEvQCQDNoXXpYK6qtQOPu80+8V6jG1hfkdJnGuEShfkdOpKc3g0EJS8/9RVZ+ JjpJbWN/+vETYtOOiZwyjhNI5ew3JYk9mw== -----END CERTIFICATE-----Generated at Fri Oct 10 20:01:11 2025 by rpki-client